AB#30325 make app reg an enterprise app

NOTE - this PR was originally raised by Frances in ADO, and has been recreated here in GH.

infrastructure/app-registration.tf

@@ -42,6 +42,24 @@ resource "azuread_application" "app" {
     id                   = "497406e4-012a-4267-bf18-45a1cb148a01"
     value                = "DataConsumer"
   }
+
+  feature_tags {
+    enterprise = true
+  }
+
+  required_resource_access {
+    resource_app_id = "00000003-0000-0000-c000-000000000000" # Microsoft Graph
+
+    resource_access {
+      id   = "df021288-bdef-4463-88db-98f22de89214" # User.Read.All
+      type = "Role"
+    }
+
+    resource_access {
+      id   = "b4e74841-8e56-480b-be8b-910348b18b4c" # User.ReadWrite
+      type = "Scope"
+    }
+  }
 }
 
 resource "azuread_application_pre_authorized" "azcli" {
@@ -53,4 +71,4 @@ resource "azuread_application_pre_authorized" "azcli" {
       for scope in api.oauth2_permission_scope : scope.id
     ]
   ])
-}
+}